$ rpki-client -vvf rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa File: 9095FC2CB2E811EBADBB3753C4F9AE02.roa (raw, json) Hash identifier: UEtjJ89kzBo6zKqimUbcEU98SNn7TiyG61TgGa4Lf/s= Subject key identifier: 17:13:C4:59:39:A5:BC:47:0B:99:CD:F2:FB:F3:BF:D1:D1:46:0B:3E Certificate issuer: /CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Certificate serial: 04CB Authority key identifier: B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa Signing time: Tue 07 Nov 2023 00:52:29 +0000 ROA not before: Tue 07 Nov 2023 00:52:29 +0000 ROA not after: Sun 02 Mar 2025 00:00:00 +0000 asID: 133847 IP address blocks: 72.35.248.0/22 maxlen: 24 74.114.48.0/22 maxlen: 24 135.84.232.0/21 maxlen: 24 146.88.152.0/21 maxlen: 24 159.117.132.0/22 maxlen: 24 159.117.136.0/21 maxlen: 24 159.117.201.0/24 maxlen: 24 159.117.223.0/24 maxlen: 24 165.84.232.0/21 maxlen: 24 208.66.232.0/21 maxlen: 24 208.71.212.0/22 maxlen: 24 208.81.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Nov 2024 19:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1227 (0x4cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B777C/serialNumber=B0910B07C86B0FFA300A52AC7C31FCB52C0532D7 Validity Not Before: Nov 7 00:52:29 2023 GMT Not After : Mar 2 00:00:00 2025 GMT Subject: CN=65498a4d-de70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:70:f0:db:59:aa:1c:20:48:5b:59:63:ec:60: cc:c5:74:ed:1e:b5:0c:07:92:e4:3d:ee:12:65:74: 8c:4a:05:b3:ad:ca:54:4c:b3:da:86:5b:80:23:96: 57:48:b9:6d:87:4d:29:ec:15:92:36:a3:09:d1:79: 44:f8:1e:e7:c8:f5:3c:3f:55:c6:0c:a1:42:be:68: f8:f7:8c:79:6c:dd:b1:ac:af:b7:37:e4:8c:bf:73: 51:13:73:b7:f4:d9:b6:5b:3e:c0:b7:cf:44:79:d5: 67:09:d5:2d:a6:30:bd:67:8c:4b:4f:1c:21:33:c5: 5f:67:f3:f4:7a:da:94:65:0d:12:3c:ec:80:ca:6b: b6:29:fd:44:ac:fb:99:99:79:39:d3:e2:11:3b:d7: ff:20:55:b4:17:e9:8f:aa:43:a0:94:76:5c:3b:60: 7c:84:3c:7a:ed:27:fb:6c:af:71:8f:4e:b0:41:2a: f5:78:e3:92:a1:3e:b6:d9:8e:69:9d:6f:eb:01:bd: e0:a8:af:75:c7:d5:34:81:9f:51:d7:ff:18:e0:58: ef:72:46:97:4e:45:3c:ef:e2:3a:1c:d2:c7:ab:93: b4:3b:bc:25:5b:dd:d0:30:2e:c9:3a:ad:82:68:d3: a6:45:6a:55:eb:d2:59:ee:16:c7:49:ae:36:ff:be: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:13:C4:59:39:A5:BC:47:0B:99:CD:F2:FB:F3:BF:D1:D1:46:0B:3E X509v3 Authority Key Identifier: keyid:B0:91:0B:07:C8:6B:0F:FA:30:0A:52:AC:7C:31:FC:B5:2C:05:32:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/sJELB8hrD_owClKsfDH8tSwFMtc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sJELB8hrD_owClKsfDH8tSwFMtc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B777C/62D03E8CB2DA11EB8B384A60C4F9AE02/9095FC2CB2E811EBADBB3753C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 72.35.248.0/22 74.114.48.0/22 135.84.232.0/21 146.88.152.0/21 159.117.132.0-159.117.143.255 159.117.201.0/24 159.117.223.0/24 165.84.232.0/21 208.66.232.0/21 208.71.212.0/22 208.81.116.0/22 Signature Algorithm: sha256WithRSAEncryption 04:78:0e:ba:93:e3:a1:08:56:2a:97:2d:aa:ae:e4:f5:4a:0d: 68:80:1d:ad:5f:94:cd:91:50:b6:1c:b5:10:ac:67:30:92:3e: 41:26:ab:b4:c5:f1:cf:b5:bd:29:ff:bf:b1:32:06:47:f6:4b: 28:d8:4a:31:db:22:53:a9:c0:06:ce:f2:45:55:60:00:85:fd: 6d:ca:23:e0:6f:9b:ac:fa:0e:ce:25:56:bd:80:5c:94:c9:f2: f8:da:33:bf:87:af:c5:c5:27:6a:22:c1:ef:58:71:59:80:8d: 64:e0:14:93:f0:72:22:37:35:fd:43:3e:e2:44:84:0b:ae:00: e8:8a:98:12:2f:41:b9:f2:4a:c9:ea:f4:bb:3e:9c:93:bd:1a: ab:64:2c:b7:41:9e:e2:e4:6d:ef:08:5b:23:e9:60:fa:c7:95: 91:cf:b8:bc:01:34:ec:ab:23:84:81:34:ef:e9:a3:4b:22:f9: e7:eb:12:3e:db:40:a0:58:af:58:83:b5:3e:db:95:10:43:25: 66:0c:78:38:2b:1e:47:0a:0b:2a:b5:e9:40:5f:c1:b5:05:e3: 54:a8:ae:32:47:9c:e1:bc:b5:05:ec:89:af:69:cc:46:ab:2c: 1e:bb:b6:b0:16:2e:23:16:ec:d1:66:5d:53:cc:f9:48:96:35: 6c:b2:ff:92 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgICBMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3N0MxMTAvBgNVBAUTKEIwOTEwQjA3Qzg2QjBGRkEzMDBBNTJBQzdDMzFGQ0I1 MkMwNTMyRDcwHhcNMjMxMTA3MDA1MjI5WhcNMjUwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02NTQ5OGE0ZC1kZTcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAonDw21mqHCBIW1lj7GDMxXTtHrUMB5LkPe4SZXSMSgWzrcpUTLPahluAI5ZX SLlth00p7BWSNqMJ0XlE+B7nyPU8P1XGDKFCvmj494x5bN2xrK+3N+SMv3NRE3O3 9Nm2Wz7At89EedVnCdUtpjC9Z4xLTxwhM8VfZ/P0etqUZQ0SPOyAymu2Kf1ErPuZ mXk50+IRO9f/IFW0F+mPqkOglHZcO2B8hDx67Sf7bK9xj06wQSr1eOOSoT622Y5p nW/rAb3gqK91x9U0gZ9R1/8Y4FjvckaXTkU87+I6HNLHq5O0O7wlW93QMC7JOq2C aNOmRWpV69JZ7hbHSa42/77z2QIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFBcTxFk5 pbxHC5nN8vvzv9HRRgs+MB8GA1UdIwQYMBaAFLCRCwfIaw/6MApSrHwx/LUsBTLX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3Qy82MkQwM0U4Q0Iy REExMUVCOEIzODRBNjBDNEY5QUUwMi9zSkVMQjhockRfb3dDbEtzZkRIOHRTd0ZN dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NKRUxCOGhyRF9vd0NsS3NmREg4dFN3Rk10Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qjc3N0MvNjJEMDNFOENCMkRBMTFFQjhCMzg0QTYwQzRGOUFFMDIvOTA5NUZDMkNC MkU4MTFFQkFEQkIzNzUzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQcBAf8E VDBSMFAEAgABMEoDBAJII/gDBAJKcjADBAOHVOgDBAOSWJgwDAMEAp91hAMEBJ91 gAMEAJ91yQMEAJ913wMEA6VU6AMEA9BC6AMEAtBH1AMEAtBRdDANBgkqhkiG9w0B AQsFAAOCAQEABHgOupPjoQhWKpctqq7k9UoNaIAdrV+UzZFQthy1EKxnMJI+QSar tMXxz7W9Kf+/sTIGR/ZLKNhKMdsiU6nABs7yRVVgAIX9bcoj4G+brPoOziVWvYBc lMny+Nozv4evxcUnaiLB71hxWYCNZOAUk/ByIjc1/UM+4kSEC64A6IqYEi9BufJK yer0uz6ck70aq2Qst0Ge4uRt7whbI+lg+seVkc+4vAE07KsjhIE07+mjSyL55+sS PttAoFivWIO1PtuVEEMlZgx4OCseRwoLKrXpQF/BtQXjVKiuMkec4by1BeyJr2nM RqssHru2sBYuIxbs0WZdU8z5SJY1bLL/kg== -----END CERTIFICATE-----Generated at Thu Nov 21 00:21:23 2024 by rpki-client on console-fra.rpki-client.org